]> git.proxmox.com Git - grub2.git/commit
hfsplus: fix two more overflows
authorPeter Jones <pjones@redhat.com>
Sun, 19 Jul 2020 18:43:31 +0000 (14:43 -0400)
committerColin Watson <cjwatson@debian.org>
Fri, 24 Jul 2020 21:43:59 +0000 (22:43 +0100)
commit2db482b906c425aa755fc78e8e8980659b92f5a1
treed43b8883f867b860e425dc0962e38d260d8786fc
parentdcc097ac0531485f0785816469370bfcb1a29f60
hfsplus: fix two more overflows

Both node->size and node->namelen come from the supplied filesystem,
which may be user-supplied.  We can't trust them for the math unless we
know they don't overflow; making sure they go through calloc() first
will give us that.

Signed-off-by: Peter Jones <pjones@redhat.com>
Reviewed-by: Darren Kenny <darren.kenny@oracle.com>
Patch-Name: hfsplus-overflow.patch
grub-core/fs/hfsplus.c